Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
File:                     trd-wiTAuY75edCwxeWH5MtB9sI.mft (raw, json)
Hash identifier:          En2mDdLQ8vi0Wviym1ojpbUax292ZtWvnU5E0mTGNeI=
Subject key identifier:   CF:8E:92:E0:91:47:D2:27:EC:17:32:44:E0:69:32:06:79:1D:19:7E
Authority key identifier: B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2
Certificate issuer:       /CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
Certificate serial:       019CAFED0C5D62BF67EFC2339C9E2D0E05FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
Manifest number:          AB
Signing time:             Mon 02 Mar 2026 19:01:13 +0000
Manifest this update:     Mon 02 Mar 2026 19:01:13 +0000
Manifest next update:     Tue 03 Mar 2026 19:01:13 +0000
Files and hashes:         1: 73YyR5FHSrGikXmoFdt-u87EbLY.roa (hash: tDxXok8jabxviQSDV+iOxxhZu5aLP8xDqLw+KYO6rW8=)
                          2: TZWXpqEIRSAn5-MdEh0TXC0ihbM.roa (hash: b6vc3j264aI0sRTYVXv8kYXqVCVq/49Qgww833Y9+O8=)
                          3: trd-wiTAuY75edCwxeWH5MtB9sI.crl (hash: /KEpo8tpW1PJNicNQRXFBpb84gjULrk6ufuIdIpN5JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:ed:0c:5d:62:bf:67:ef:c2:33:9c:9e:2d:0e:05:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6b77ec224c0b98ef979d0b0c5e587e4cb41f6c2
        Validity
            Not Before: Mar  2 19:01:13 2026 GMT
            Not After : Mar  3 19:01:13 2026 GMT
        Subject: CN=cf8e92e09147d227ec173244e0693206791d197e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:a7:95:6f:cd:03:b9:67:2c:20:02:64:19:
                    af:4e:fa:c1:41:61:e6:ae:67:9f:74:72:15:2c:a7:
                    68:02:e6:66:20:f1:0a:a3:99:da:6c:67:f7:be:03:
                    a7:1a:ac:88:26:b4:36:dd:18:b1:8f:b8:cf:ae:6a:
                    17:93:a1:a2:5d:23:5d:90:8a:c6:e7:b6:9e:6b:45:
                    db:84:be:35:62:7b:86:bf:41:af:87:3d:38:29:e6:
                    28:5f:02:67:dc:f8:b5:9a:6c:79:c2:4c:b2:13:4f:
                    fd:a6:e9:3c:81:c6:10:a0:8e:05:fb:2f:d8:68:10:
                    3b:d4:76:ca:06:42:a9:ac:8f:69:7c:4d:2a:59:d7:
                    46:2b:0c:79:12:d6:0f:78:c7:3c:c2:99:2f:7b:09:
                    eb:45:fd:82:39:95:77:72:be:32:e9:08:d9:1d:5e:
                    76:e6:e8:ac:72:96:78:26:79:d0:cb:96:4d:54:2b:
                    b8:cf:0b:77:93:35:2e:3a:73:a3:1b:0f:cb:79:32:
                    ae:9d:05:f2:40:cd:4d:73:f6:a3:5b:ca:ac:04:66:
                    69:42:19:ce:12:7a:7a:ec:93:27:1a:75:42:cb:c2:
                    48:17:74:df:33:b9:2d:6f:23:04:a2:96:64:02:80:
                    72:07:a3:22:c2:b1:50:e8:7e:72:50:de:61:72:7c:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8E:92:E0:91:47:D2:27:EC:17:32:44:E0:69:32:06:79:1D:19:7E
            X509v3 Authority Key Identifier:
                keyid:B6:B7:7E:C2:24:C0:B9:8E:F9:79:D0:B0:C5:E5:87:E4:CB:41:F6:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trd-wiTAuY75edCwxeWH5MtB9sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/604a53-c658-4ef2-8ceb-d7a829ce76e7/1/trd-wiTAuY75edCwxeWH5MtB9sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:44:66:fc:d8:9b:38:f8:f0:31:1f:09:7a:7a:fc:b6:bf:01:
         1b:18:9a:7d:b1:b3:a0:cd:13:1b:f6:63:23:4d:f3:42:00:22:
         68:fb:b7:b8:b0:9d:1e:12:7f:86:7d:68:0f:b9:28:23:69:dd:
         a0:f7:09:a2:9e:05:27:95:87:78:d2:1b:0d:1d:c7:60:b7:95:
         03:a2:27:39:99:b1:35:78:1c:ab:49:80:5a:03:c9:6b:2b:98:
         3a:11:4b:d9:41:41:f4:c5:fa:31:1f:81:2c:aa:6f:8d:e1:ec:
         f5:87:c2:7a:a8:7a:72:d7:15:05:70:83:61:5d:31:5f:49:a0:
         c7:8a:62:59:24:db:19:7a:37:31:7d:3b:cf:af:97:4a:4b:4d:
         e0:3d:87:14:55:e2:7c:59:99:ae:9b:03:19:7d:e9:34:92:27:
         a7:12:6e:f8:9a:50:9f:d4:8f:17:30:c4:64:7b:cf:cf:c0:28:
         94:43:3c:96:ee:0c:c7:72:71:30:d2:ea:c2:c0:34:fd:5b:bb:
         3d:3d:2e:43:67:90:5f:91:2b:38:6f:a3:22:a3:0d:b3:20:d5:
         c4:d7:25:ff:1f:69:34:df:b9:5d:b0:04:09:a0:00:c1:ad:44:
         88:58:31:59:04:27:97:74:ae:f1:16:b2:e0:42:45:91:61:90:
         64:b5:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:15 2026 by rpki-client